Lucene search
+L
DevexpressAsp.net Web Forms Controls

1 matches found

CVE
CVE
added 2022/10/18 12:00 a.m.106 views

CVE-2022-41479

CVE-2022-41479 affects DevExpress ASP.NET Web Forms Build v19.2.3. The DevExpress Resource Handler (ASPxHttpHandlerModule) does not verify objects referenced by the /DXR.axd?r= HTTP GET parameter, causing an Insecure Direct Object References (IDOR) that can expose the application source code (ven...

7.5CVSS7.6AI score0.01155EPSS
Save